🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2022-1870 Related CVEs: CVE-2019-12749 CVE-2020-12049 CVE-2023-34969 CVE-2022-42010 CVE-2022-42011 CVE-2022-42012 Upstream summary: A flaw was found in dbus. The implementation of DBUS_COOKIE_SHA1 is susceptible to a symbolic link attack. A malicious […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-138 Related CVEs: CVE-2023-2156 CVE-2023-3090 CVE-2023-35788 Upstream summary: A flaw was found in the Linux kernel's networking subsystem within the RPL protocol's handling. This issue results from the improper handling […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2023-2224 Related CVEs: CVE-2023-37920 CVE-2022-23491 CVE-2023-32803 CVE-2024-39689 Upstream summary: Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-152 Related CVEs: CVE-2023-4207 CVE-2023-4622 CVE-2023-4623 CVE-2023-4921 Upstream summary: A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. When fw_change() is […]
🟡 Medium ⏱ 10–30 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2025-2726 Related CVEs: CVE-2024-42353 Upstream summary: WebOb provides objects for HTTP requests and responses. When WebOb normalizes the HTTP Location header to include the request hostname, it does so by […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-133 Related CVEs: CVE-2023-2124 CVE-2023-28466 Upstream summary: An out-of-bounds memory access flaw was found in the Linux kernel's XFS file system in how a user restores an XFS image after […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-139 Related CVEs: CVE-2023-2156 CVE-2023-3090 CVE-2023-35788 CVE-2023-32233 Upstream summary: A flaw was found in the Linux kernel's networking subsystem within the RPL protocol's handling. This issue results from the improper […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2LIVEPATCH-2023-127 Related CVEs: CVE-2022-4379 CVE-2023-32233 CVE-2023-1077 CVE-2023-28466 CVE-2023-1078 CVE-2023-26545 Upstream summary: A use-after-free vulnerability was found in __nfs42_ssc_open() in fs/nfs/nfs4file.c in the Linux kernel. This flaw allows an attacker to […]
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2024-2383 Related CVEs: CVE-2023-48948 CVE-2023-48949 CVE-2023-48951 CVE-2023-48952 CVE-2024-57635 CVE-2024-57636 CVE-2024-57637 CVE-2024-57638 +12 more Upstream summary: An issue in the box_div function in openlink virtuoso-opensource v7.2.11 allows attackers to cause a […]
🔴 Critical ⏱ 15–90 min Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read • Source: Amazon Linux advisory ALAS2-2021-1722 Related CVEs: CVE-2021-43527 CVE-2023-7104 CVE-2023-0767 CVE-2019-11729 CVE-2019-11745 CVE-2020-25648 CVE-2019-11719 CVE-2019-11727 +11 more Upstream summary: NSS (Network Security Services) up to and including 3.73 is vulnerable to a heap overflow […]
